Upgrade to Pro — share decks privately, control downloads, hide ads and more …

EASM mistakes waiting to happen

Avatar for JR0ch17 JR0ch17
January 25, 2022
Technology
0
49

EASM mistakes waiting to happen

Avatar for JR0ch17

JR0ch17

January 25, 2022
Tweet

More Decks by JR0ch17

See All by JR0ch17
Traversing my way in the internal network
Avatar for JR0ch17 jr0ch17
0
170
Getting Started in Bug Bounty
Avatar for JR0ch17 jr0ch17
0
160
Getting Blindly Lucky
Avatar for JR0ch17 jr0ch17
0
94
Qu'est-ce que le bug bounty?
Avatar for JR0ch17 jr0ch17
0
140
Finding 5 bugs in a single parameter
Avatar for JR0ch17 jr0ch17
0
110
Beyond the Borders of Scope
Avatar for JR0ch17 jr0ch17
1
90
Bad API, hAPI Hackers!
Avatar for JR0ch17 jr0ch17
0
1.6k

Other Decks in Technology

See All in Technology
生成AI活用によるPRレビュー改善の歩み
Avatar for LINEヤフーTech (LY Corporation Tech) lycorptech_jp
PRO
3
1.1k
歴史に敬意を！ パラシュートVPoEが組織と共同で立ち上がる信頼醸成オンボーディング
Avatar for Go Akazawa go0517go
PRO
0
190
インシデント対応入門
Avatar for gr1m0h grimoh
7
5.1k
2026年のAIエージェント構築はどうなる？
Avatar for みのるん minorun365
10
2.2k
AIで「ふとした疑問」を即座に検証する 〜定量で圧倒するN1理解〜
Avatar for KAKEHASHI kakehashi
PRO
3
730
技術書を出版するまでの1161時間50分38秒
Avatar for Kakeami kakeami
0
160
EKSで実践する オブザーバビリティの現在地
Avatar for HonMarkHunt honmarkhunt
2
300
AWSが推進する AI駆動開発ライフサイクル入門 〜 AI駆動開発時代に必要な人材とは 〜 / introduction_to_aidlc_and_skills
Avatar for Atsushi Fukui fatsushi
7
4.7k
Agent Ready になるためにデータ基盤チームが今年やること / How We're Making Our Data Platform Agent-Ready
Avatar for Hiroka Zaitsu zaimy
0
160
LINEアプリ開発のための Claude Code活用基盤の構築
Avatar for LINEヤフーTech (LY Corporation Tech) lycorptech_jp
PRO
1
900
GoとWasmでつくる軽量ブラウザUI
Avatar for kyo keyl0ve
0
130
EMから現場に戻って見えた2026年の開発者視点
Avatar for aki sudoakiy
1
400

Featured

See All Featured
How Fast Is Fast Enough? [PerfNow 2025]
Avatar for Tammy Everts tammyeverts
3
460
XXLCSS - How to scale CSS and keep your sanity
Avatar for Zaharenia Atzitzikaki sugarenia
249
1.3M
<Decoding/> the Language of Devs - We Love SEO 2024
Avatar for Nikki Halliwell nikkihalliwell
1
140
Design in an AI World
Avatar for tapps tapps
0
160
From π to Pie charts
Avatar for Rasagy Sharma rasagy
0
140
Designing for Timeless Needs
Avatar for Cassini Nazir cassininazir
0
140
Rails Girls Zürich Keynote
Avatar for Gregor Martynus gr2m
96
14k
Lightning talk: Run Django tests with GitHub Actions
Avatar for Sarah Abderemane sabderemane
0
130
The Psychology of Web Performance [Beyond Tellerrand 2023]
Avatar for Tammy Everts tammyeverts
49
3.3k
Let's Do A Bunch of Simple Stuff to Make Websites Faster
Avatar for Chris Coyier chriscoyier
508
140k
Claude Code のすすめ
Avatar for schroneko schroneko
67
210k
Heart Work Chapter 1 - Part 1
Avatar for Lake Fama lfama
PRO
5
35k

Transcript

  1. EASM mistakes waiting to happen

  2. GET /whoami HTTP/2 Jasmin Landry JR0ch17 Lead, IT & Security

    at Montreal Canadiens fan

  3. GET /agenda HTTP/2 EASM Common mistakes Hacker perspective

  4. GET /EASM HTTP/2 What exactly is EASM? What does it

    cover? Why is it important?

  5. GET /common_mistakes HTTP/2 Lack of Change Management Not respecting Least

    Privilege Misconfigured WAFs Cloud misconfigs (S3 buckets)

  6. GET /hacker_perspective HTTP/2 • Subdomains • IPs • TLS certificates

    • Third-party apps Recon EVERYTHING • Monitor for new assets • Monitor any change Continuous Monitoring

  7. GET /thanks HTTP/2 Thank you for listening Questions? More questions?

    DMs are open on and